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The  Upside  of  Shadow  IT 

18  Tech-savvy  employees  have  long  bypassed  IT  to  get  their  hands  on  hot  technologies.  Rather  than  standing 
in  the  way.  smart  CIOs  are  now  embracing  and  even  encouraging  shadow  IT.  Here's  why. 
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IT  Transformation: 

Virtualizing  the  Enterprise 


IT  transformation  is  underway.  Brocade 
CTO  Dave  Stevens  explains  this  impor¬ 
tant  shift  and  what  it  means  to  networks. 

Can  you  describe  the  movement 
toward  virtualizing  the  enterprise? 

There  is  a  major  iT  transformation  un¬ 
derway,  which  is  perhaps  the  biggest  shift 
in  the  IT  space  that  we’ve  seen  since  the 
adoption  of  the  Internet.  It’s  driven  by  a 
number  of  external  trends,  such  as  the 
number  of  devices  that  are  plugged  into 
the  network-by  some  estimates  there  will 
be  more  than  25  billion  devices  out  there 
in  the  next  few  years.  And  at  the  other 
end  of  the  connection,  organizations  are 
continuing  to  build  big  data  centers  as 
the  cost  of  storage  and  processing  capac¬ 
ity  goes  down  and  data  center  networks 
become  more  capable,  higher  performing, 
and  less  costly  Between  those  two  end 
points  you  have  to  connect  over  the  wide 
area;  and  over  the  years,  those  connec¬ 
tions  are  becoming  less  expensive  and 
massively  more  capable.  So  now  you  have 
an  environment  where  enterprises  are 
taking  advantage  of  new  infrastructures 
and  leveraging  the  technology  and  appli¬ 
cations  needed  to  support  an  organization 
that  is  distributed  over  wide  distances. 
Customers  are  going  to  use  a  combination 
of  internal  and  external  applications-the 
latter  coming  from  cloud  services,  and 
they’re  combining  those  internal  and  ex¬ 
ternal  resources  into  a  modem  IT  catalog 
that  can  support  all  users. 

What  are  the  characteristics  of  the  virtual 
enterprise  network? 

The  network  needs  to  be  able  to  mn 
over  distances,  be  more  dynamic,  and  it 
must  emphasize  non-stop  operations.  If 
you  have  your  entire  organization  based 
on  applications  that  are  mnning  across 
the  network  infrastructure,  there  really 
isn’t  a  good  time  to  bring  the  network 


down  for  maintenance.  Also,  applica¬ 
tions  must  be  optimized  to  mn  on  the 
network  infrastmeture.  For  example,  with 
virtualization,  the  internal  and  external 
network  must  be  optimized  to  support 
the  movement  of  virtual  machines  inside 
and  between  data  centers.  These  changes 
have  to  be  made  incrementally,  so  that 
customers  don’t  have  to  throw  out  net¬ 
work  investments  they’ve  made  in  the  last 
20  years.  We  need  to  use  new  technology 
and  processes,  but  also  leverage  assets  that 
exist  today 

How  are  networks  changing  to  support 
these  new  requirements? 

Inside  the  data  center  there’s  a  big  transi¬ 
tion  going  on  with  the  adoption  of  modu¬ 
lar  applications,  like  virtualization,  where 
the  hierarchical  stracture  of  the  tradition¬ 
al  data  center  doesn’t  operate  very  well.  So 
there’s  a  movement  in  the  industry  toward 
faster,  flatter  networks  inside  the  data 
center,  such  as  Ethernet  fabrics.  In  the 
broader  carrier  networks,  infrastmeture  is 
being  built  to  support  the  high  growth  in 
traffic  patterns,  so  the  network  has  to  have 
much  higher  performance  and  lower  cost 
to  fit  this  new  model.  And  at  the  enter¬ 
prise  network  level,  these  networks  must 
be  designed  to  be  very  resilient,  automat¬ 
ed,  and  cheaper  to  operate. 

What  business  benefits  can  companies 
expect  to  gain  from  virtualizing  the 
enterprise? 

There  are  many:  greater  productivity, 
faster  time  to  market,  faster  implementa¬ 
tion  of  new  applications,  lower  costs,  and 
the  ability  to  create  a  strategic  advantage 
over  the  competition  by  using  an  array 
of  information  that  can  only  be  gained 
by  amalgamating  information  from  both 
local  and  remote  resources.  The  network 
is  really  the  glue  that  ties  all  these  services 
and  computing  infrastmetures  together.  ■ 


Brocade  delivers  cloud-optimized  networks  for  today  and  tomorrow. 
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Weak  Passwords  Still 
Subvert  IT  Security 

Despite  years  of  warnings,  analysts  say  enterprises 
continue  to  be  plagued  by  ‘the  curse  of  the  reusable 
password.’  By  Jaikumar  Vijayan 


A  RECENT  DAT*  BREACH  that  exposed  the  Social  Secu¬ 
rity  oumhers  of  mote  than  280,000  people  served 
as  yet  another  reminder  of  the  well-recogniaed,  but 
often  discounted,  risks  associated  with  using  weak 
and  default  passwords. 

In  the  breach  of  the  Medicaid  server  at  the  Utah  Depart¬ 
ment  of  Health  late  last  month,  the  hackers  —  believed  to  be 
from  Eastern  Europe  —  exploited  a  configuration  error  at  the 
authentication  layer  of  the  server  hosting  the  compromised  data, 
according  to  Utah  IT  officials. 

Many  security  analysts  see  that  formal 
explanation  as  a  somewhat  euphemistic 
admission  that  the  breached  server  was 
Using  a  default  administrative  password  or 
an  easily  guessaUe  one,  thereby  allowing 
the  attackers  to  bypass  the  perimeter-, 
network-  and  application-level  security  con¬ 
trols  buik  to  protect  the  agency's  systems. 

While  such  mistakes  ate  easy  to  avoid, 
they’re  surprisingly  common  despite  years 
of  warnings  about  the  dangers  of  using 
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on  the  U.S.  Chamber  of  Commerce  and 
open-source  WineHQ  databases  last  year. 

Moreover,  Verizon’s  latest  annual 
report  on  worldwide  data  breaches 
concluded  that  attacks  exploiting  weak 
passwords  are  still  especially  endemic 
in  the  retail  and  hospitality  industries. 

The  Verizon  report  said  learning  the  pass¬ 
words  used  to  access  such  sites  requires 
“little  in-depth  knowledge  or  creativity.” 

Gartner  analyst  John  Pescatore  said 
the  Anonymous  hacking  collective  takes 
advantage  of  the  very  human  tendency 
to  use  the  same  password  for  multiple 

“A  lot  of  Anonymous’  recent  success  has  been  in  attacks  where 
they  have  obtained  users’  passwords  to  external  services  and  then 
found  the  same  passwords  in  use  at  sensitive  internal  applica¬ 
tions  or  in  email  systems,”  Pescatore  said.  That  is  ’’the  curse  of 
the  reusable  password,”  he  added. 

“The  truth  is,  anyone  trying  to  protect  nontrivial  assets  should 
be  using  multifactor  authentication  and/or  complementary 
controls  to  protect  themselves,”  said  Peter  Lindstrom,  an  analyst 
with  Spire  Security.  “The  password  has  too  many  weaknesses. 


At  this  stage  of  the 
IT  game,  there  is 
really  no  excuse  for  using 
default  passwords. 


including  the  obvious  human  ones. 

Most  password  schemes  that 
aren’t  protected  by  another  form  of 
authentication  or  lockout  controls  are 
susceptible  to  brute-force  attacks,  in 
which  automated  tools  are  used  to 
guess  passwords,  said  Lindstrom. 

“At  this  stage  of  the  IT  game,”  he 
added,  “there  is  really  no  excuse  for 
using  default  passwords,”  • 

John  Ribeiro  of  the  IDG  News  Service 
contributed  to  this  story. 
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If  it's  autonomy  from  IT  headaches  a'-'  -  e  ss  that  you're  pursumy  for  your  company,  then  CentuiyLuu' 
the  enterprise  cuninmuiications  po"o''  ■  .  ■  ^'’eri  We  .are  hone.st  anrj  *air  and  totally  committed  to  1  elpu 

you  unvH  loiifi  'eim  Tnioiijii ......  ......m  aco.iisdion  of  Savvas,  v.e've  ri:-‘her  snliddien  c.n  cv'  "- 


Data 


CenturyLink 


i/busir 


NEWS  ANALYSIS 


c 


IT  Skills  Gap 
Forces  CIOs  to 
Get  Creative 

Employers  are  offering  innovative 
training  programs  to  help  IT  staffers 
master  the  skills  they  need  In  today’s 
evolving  market.  By  Lucas  Mearian 


FmDmC  IT  WORKERS  who  are  well  vcised  in 

ever-changing  technologies  like  wireless  net-  ] 

working,  cloud  computing,  mobile  security  and 

big  dau  analytics  is  becoming  increasingly  dif- 

ficult  for  CIOs. 

To  make  up  for  the  lack  of  expertise  in  such  areas,  IT 
managers  are  looking  for  job  seekers  trained  in  multiple 
disciplines,  and  they’re  implementing  cross-training  programs  for 
the  workers  they  have. 

At  Computerworfd’s  SNW  Spring  2012  conference  in  Dallas 
earlier  this  month,  several  IT  executives  described  steps  they’re 
taking  to  hire  multiskilled  workers  and  to  break  down  silos  of 
specialization  within  IT’s  ranks. 

“1  need  people  who  have  two  or  three  areas  of  expertise," 
said  David  Richter,  vice  president  of  infrastructure  solutions  at 
Kimberly-Clark.  “I  need  a  broader  bench.  [We]  are  focused  on 
training  people  to  make  them  more  competent  in  their  current 
role  —  and  their  next  role.” 

’The  Irving,  Texas-based  paper  products  maker  cross-trains  IT 
sta&rs  by  rotating  people  into  new  roles  for  six-month  periods, 
Richter  said.  Kimberly-Clark  has  also  cut  the  number  of  IT  job 
descriptions  from  more  than  350  to  about  40,  many  of  which 
require  multiple  skills,  he  added. 

At  Cook  Children’s  Health  Care  System  in  Fort  Worth,  Texas, 
the  IT  staff  has  doubled  over  the  past  three  years  or  so,  but  CIO 
Theresa  Meadows  said  she  still  needs  to  expand  employees’  skill 
sets,  particularly  in  the  areas  of  security 
and  arudytics.  She  noted  that  the  health¬ 
care  provider  must  comply  with  ever- 
changing  regulations  enacted  to  ensure 
the  security  of  patient  information,  and 
it’s  under  pressure  to  embrace  big  data 
analytics  tools  that  can  parse  medical  in¬ 
formation  so  it’s  more  useful  to  physicians, 
nurses  and  medical  technicians. 

To  help  people  master  new  skills,  the 


IT  employees  —  a  veteran,  a  midterm  worker  and  a  new  hire, 
each  with  expertise  in  different  areas  —  on  a  team  so  they  can 
learn  from  one  another,  said  Meadows. 

One  team  has  “one  Citrix  admin  who  was  really  our  only 
skilled  administrator  who  is  now  training  the  other  two.”  she 
said.  For  their  part,  the  other  two  are  training  the  Citrix  admin 
on  "newer  skills  just  coming  into  our  organization,”  she  added. 

’The  pod  concept  is  particularly  useful  for  employees  who  have 
received  technicril  training  but  don’t  have  hands-on  experience, 
beaming  from  senior  colleagues  helps  them  become  comfortable 
more  quickly,  she  said. 

At  United  Orthopedic  Group,  a  Carlsbad,  Calif.-based  maker  of 
non-invasive  orthopedic  rehabilitation  products,  IT  workers  must 
be  multiskilled  because  the  staff  is  small.  Among  other  things, 
CIO  James  Clent  is  training  his  employees  to  better  communicate 
with  their  colleagues  on  the  business  side. 

"1  see  my  technicians  talking  to  a  customer  and  the  customer’s 
eyes  glaze  over,"  Clent  said.  “They  need  to  be  able  to  get  their 
message  across.  Communication  is  the  No.  1  thing  to  make  IT  • 
and  the  business  successful.” 

—  - ,1.,  offers  online  m- 
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We  drive  data  center  innovations. 


Our  physical  infrastructure  with  full-visibility  management 
software  enables  responsive,  energy-efficient  data  centers. 


Wayne 

Shurts 


This  retail  CIO  touts 
the  business  benefits 
of  boosting  IT’s 
speed  and  agility. 

What's  your  favorite  technology? 

I  love  what's  going  on  in  mobility. 
It's  bringing  technology  everywhere 
we  go.  we  have  higher-powered 
computers  in  our  pockets,  and  we're 
just  beginning  to  understand  the 
opportunities  for  how  we  use  that 


technology.  It's  revolutionary. 


What's  the  best  piece  of  advice 


IN  APRIL  2010,  when  Wayne  Shurts  stepped  into  the  role  of  executive  vice  president 
and  CIO  ot  SuperValu,  a  US.  grocery  retailer  and  distributor  whose  brands  include 
the  Albertsons  and  Shaw's/Star  Market  chains,  he  brought  skills  he  had  honed  as  an 
IT  executive  at  Cadbuiy.  as  well  as  two  decades  of  experience  in  finance,  marketing 
and  sales  at  Nabisco.  Shurts.  who  has  an  MBA  in  marfceting/Vom  Seton  Hall  University,  also 
spent  several  years  as  heod  o/his  own  consulting  firm,  which  specialized  in  transformational 
technology  strategies.  He's  now  working  to  help  the  IT  department  at  SuperValu  better 
support  the  company’s  overall  business. 


What’s  the  best  piece  of  advice 
you've  ever  given?  if  you  want 
to  move  to  the  next  job.  start 


doing  it  today.  orass-roots  people  got  it  started.  Craig  is  very  much  a  technology-focused  CEO.  He  has 
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Rethink  Possible 


THE  GRILL  |  WAYNE  SHURTS 


maintenance  in  an  industry  known  for  thin  profit 
margins?  We  have  a  multiyear  ongoing  cost  savings 
initiative  going  on  here  in  IT.  We're  looking  for  cost 
savings,  looking  for  ways  to  do  what  we  do  today 
cheaper.  The  good  news  is  technology  gets  cheaper 
over  time.  And  new  technology,  like  the  cloud,  when 
you  deploy  it  right,  can  be  done  the  same  or  better  or 
cheaper.  And  with  this  intensely  business-focused  IT, 
we  use  technology  in  a  way  that  can  get  the  job  done 
in  a  cost-eflective  way. 

How  do  you  define  agility  within  an  IT  organization? 

1  would  define  it  as  speed,  and  it's  something  that  IT 
traditionally  hasn’t  been  good  at  —  bringing  about 
quick  solutions  in  a  quick  time  frame.  How  can  we 
work  with  the  business  and  turn  around  new  capa¬ 
bilities,  functions,  systems  in  a  very  fast  time  frame? 
I'm  talking  about  three  weeks  or  three  months  —  not 
i8  months  or  three  years,  like  IT  normally  works. 
Agility  requires  a  new  way  of  thinking  and  working, 
both  for  IT  and  business.  You  absolutely  have  to 
start  with  speed  in  mind,  and  move  from  designing 
systems  in  conference  rooms  to  working  on  the  store 
floor  or  the  warehouse  floor,  working  directly  with 
the  end  users,  rapidly  developing  prototypes,  iterat¬ 
ing,  finding  out  what  works  and  just  developing  in  a 
completely  different  fashion,  testing  as  you  go. 

How  do  you  balance  agility  with  other  requirements 
-  such  as  guaranteeing  that  systems  do  what  they’re 
supposed  to  do,  security  needs,  usability  and  so  on? 

There  are  two  things  that  we  found,  two  approaches 
we’re  taking.  We  set  folks  off  to  begin  doing  the 
prototype  and  iterations  with  the  business,  have  them 
start  using  it,  changing  it  days  later.  That’s  a  very 
agile,  interactive  process.  We  end  up  with  something 
we’re  using  and  that’s  solving  a  problem,  and  that’s 
great.  But  you  might  look  at  that  product  at  the  end  of 
the  day  and  say,  “It’s  wonderful,  we  got  it  done  fast." 
but  it’s  not  really  scalable  to  4,000  stores.  So  we  bring 
in  folks  who  look  at  it  and  say,  "How  do  we  make  it 
industrial  strength?" 

The  other  thing  we’ve  found  is  that  speed  and 
quality  ate  complementary.  By  working  with  the 
business  to  develop  an  application,  we  get  a  much 
greater  quality  application  because  it’s  grown  up 
through  real-life  use,  [not]  where  we  sit  in  the  confer- 
etKe  room  and  envision  the  way  it  should  work  and 
develop  it  over  a  long  period  of  time. 

If  the  lines  continue  to  blur  in  the  future,  will  the  CIO 
role  become  obsolete?  There  will  always  be  a  need 
for  a  CIO  or  a  role  like  that  1  actually  think  the  lines 
are  blurring  because  technology  is  becoming  more 
ubiquitous,  but  we  still  need  an  enterprise  view  to 
bring  things  together. 

-  Intervieui  by  Computerworld  contributing  writer 
Mary  K.  Pratt  (mar)*pratt@veria)n.net) 
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BUILT  FOR  FUTURE 

READY 


Microsoft  Private  Cloud  Solutions 


In  the  future,  your  datacenter  will  need  to  be  a  profit  center. 
Go  with  a  private  cloud  solution  that  doesn't  charge  per  VM. 
Learn  more  at  Microsoft.com/readynow 
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Fixingthe  Technology 
Isn't  Always  Enough 


Relax;  you 
don't  have  to 
be  Dr.  Phil  to 
address  users' 
feelings. 


PuiielemCEOof 

Leading  Geeks,  is 
devoted  to  clarifying 
the  murky  world  of 
human  emotion  for 
people  who  gravitate 
toward  concrete 
thinking.  His  newest 
book  is  8  Sreps  to 
Restoring  aient  Trust: 
A  Professional's  Guide 
to  Managing  Client 
Conflict.  You  can 
contact  him  at  info@ 
leadinggeeks.com. 


Every  it  person  has  had  one  of  these  situations.  A  user  comes  to 
you  with  a  problem.  You  fix  it  and  announce,  “Prohlem  solved”  or 
“Case  closed.”  But  you’re  met  with  a  long,  uncomfortable  silence 
or  a  blank  stare.  It’s  an  awkward  moment  that  you  can  end  only  by 


saying  something  like.  “Well,  let  me  know  if 
there’s  anything  else  I  can  do  for  you.”  before  shuf¬ 
fling  away,  wondering  where  you  went  wrong. 

Where  we  go  wrong,  more  often  than  not,  is  in 
handling  the  facts  of  a  problem  but  not  the  feel¬ 
ings  that  accompany  it.  The  technology  problem  is 
sohred,  but  the  feelings  that  the  problem  aroused 
in  the  user  —  anger,  disappointment  or  frustra¬ 
tion  —  ate  unresolved. 

I  can  imagine  what  you  have  to  say  to  that; 
"Dealing  with  feelings  is  not  in  my  skill  set.”  We 
geeks  are  adept  at  handling  the  facts  of  people’s 
problems  and  notoriously  oblivious  to  their  feel¬ 
ings.  But  if  you  want  to  be  good  at  working  with 
nontechnical  people,  you  have  to  expand  your 
ability  to  deal  with  both.  Whether  they  ask  for  it 
or  not,  whether  they  realize  it  or  not,  they  need 
you  to  help  them  resolve  both  to  move  forward. 

So  why  don’t  they  just  tell  you  that  they’re  upset? 
Two  reasons;  At  work,  people  don’t  feel  comfort¬ 
able  talking  about  feelings.  It’s  safer  to  complain 
about  facts.  And  sometimes  it’s  hard  to  put  feelings 
into  words.  People  may  not  even  be  able  to  articu¬ 
late  the  nature  of  their  disappointment. 

I  happen  to  think  that  geeks  can  handle  these 
situations.  We’re  problem-solvets,  and  if  we  just 
expand  our  definition  of  the  problerrts  we  solve  to 
include  both  the  facts  and  the  undedying  feelings, 
we  can  deal  with  them  like  any  other  difficulty. 
Relax;  you  don’t  have  to  be  Dr.  Phil.  You  just  need 
to  use  some  responsive  words  and  send  subtle 
sigrrals  that  show  you  care. 

Empathize  methodicaily.  Train  yourself  to 


recognize  emotions  that  aren’t  explicitly  stated. 
Listen  to  users’  word  choices.  (“It  just  died  on  me.”) 
Recognize  the  feelings  in  their  tone  of  voice.  Put 
yourself  in  their  shoes.  Then,  simply  acknowledge 
what  they’re  feeling  by  saying  something  such  as, 
“This  must  be  really  frustrating  for  you.”  When  you 
do  that,  users  feel  that  yrru  ate  trying  to  help  them, 
as  people,  rather  than  just  tending  to  the  machines. 
Aral  when  the  problem  is  solved  and  the  case 
closed,  speak  to  both  the  technical  and  experierr- 
tial  parts  of  the  problem.  Say  something  like,  “It’s 
working  now  arid  should  make  your  life  a  whole  lot 
easier.”  Seriously  —  it’s  that  simple. 

Apologize  with  dignity.  Sometimes  a  simple 
apology  will  make  the  difference,  even  though 
you  have  nothing  to  apologize  for.  It’s  not  a  sign  of 
weakness  to  let  someone  know  you’re  sorry  that 
they’re  experiencing  discomfort  or  inconvenience. 
It’s  not  necessarily  an  admission  of  personal  guilt 
either.  Just  say,  “I’m  sorry  that  this  is  so  difficult.” 

Share  your  own  fadings  about  the  sftuation. 

It  comforts  people  to  know  that  they  aren’t  the 
only  ones  who  mi^t  feel  a  certain  way  about  a 
situation.  Letting  them  know  about  your  own 
experiences  allows  you  to  build  a  relationship 
rather  than  conduct  a  transaction.  When  you  say, 
“This  has  been  keeping  me  up  at  night  too,”  you’re 
sharing  in  the  person’s  urgency  and  upset. 
Technical  people  who  can  navigate  both  facts  and 

feelings  ate  the  ones  that  business  people  really  want 

to  work  with.  When  you  include  the  user’s  emotional 

life  in  your  problem  definition,  you  become  that 

magical  person  who  can  wotk  with  anyone.  * 
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Check  "Launch  website"  off  the  list 

(before  lunch) 


iPage  Makes  Building  Websites  Easy 

There's  plenty  to  do  when  starting  a  business.  Too  often,  launching 
a  website  gets  pushed  down  on  the  list.  But,  that's  where  people  are 
looking  for  you  now.  With  iPage,  you  can  have  a  website  live  in 
under  an  hour.  A  FREE  DOMAIIMralong  with  a  choice  of  site-  and 
store-builders  makes  it  quick,  easy  and  affordable. 


iPa.ge 


877-472-4399 

ipage.com/cw 
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THE  UPSIDE  OF 

SliadowIT 


Rather  than  standing 
in  the  way,  smart  CIOs  are  now 
embracing  and  even  encouraging 
shadow  IT, 
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First,  A  SCARY 

STATISTIC;  Gartner 
predicts  that  in  less 
than  three  years, 

35%  of  enterprise  IT 
expenditures  will 
happen  outside  of  the 
corporate  IT  budget. 

Employees  will  regularly  subscribe 
to  collaboration,  analytic  and  other 
cloud  services  they  want,  all  with 
the  press  of  a  button.  Others  will 
simply  build  their  own  applications 
using  readily  available  cloud-based 
tools  and  development  platforms. 

Either  way,  the  corporate  IT 
department  will  be  bypassed. 

As  one  industry  pundit  put  it,  “it 
inmates  are  running  the  asylum." 

Now,  the  reality:  Employees  have  been  doing  an  end 
run  arouiKl  corporate  IT  aral  usitrg  shadow  IT  systems 
—  that  is,  systems  built  and  used  in  companies  without 
organizational  approval  —  for  decades.  Look  no  further 
than  the  volumes  of  company  and  customer  data  stored 
in  Excel  files  scattered  from  here  to  kingdom  come. 
Indeed,  results  of  PricewaterhouseCoopers’  Digital 
IQ  Survey  indicate  that  at  too  of  the  companies  PwC 
ranks  as  “top  performers,"  IT  controls  less  than  50%  of 
corporate  technology  expendinires. 

Those  percentages  “ate  not  shocking  at  all  because 


To  empower 
employees  to  do 
it  their  way  is  a 
huge  deal.  It’s  an 
inevitable  reality. 

As  I  see  ity  there’s 
a  bigger  risk 
associated  with 
not  doing  that. 


ill  feel  like  the 


in  many  cases,  the  person  who 
understands  what  to  buy  is  not  an 
IT  person,"  says  John  Murray,  CIO 
at  Genworth  Wealth  Management 
■  in  Pleasant  Hill,  Calif.  “Classic 
shadow  IT  is  out  there,  and  if  its 
something  that  is  serving  a  purely 
functional  need  and  is  something 
that  is  not  customer-facing,  it’s  not 
the  worst  thing  in  the  world." 

So  what’s  the  big  deal  about 
the  Gartner  statistic,  and  why  does 
it  spook  so  many  of  today’s 
IT  professionals? 

There’s  the  loss  of  control,  of 


exponential  growth  in  the  number 
of  rapidly  emerging  consumer  technologies,  cloud 
services  and  roll-your-own  apps.  It’s  both  a  volume 
and  velocity  issue.  Ten  years  ago,  in  contrast,  a  scant 
10%  of  tech  expenditures  happened  outside  of  IT, 
according  to  Dion  Hinchcliffe,  a  veteran  business'  and 
IT  strategist  and  executive  vice  president  at  Dachis 
Group,  a  social  business  consultancy  in  Austin.  “Now, 
IT  is  cheap,  often  free.  That  allows  people  to  evaluate 
and  acquire  solutions  on  the  ground,"  he  notes. 

And  mote  of  the  workforce  is  doing  just  that.  “In 
general,  people  are  much  more  tech-sawy.  They  know 
what  is  possible.  Everyone  is  trained  that  ‘there's  an 
app  for  that,’  ”  Hinchcliffe  says. 


Innovation 
At  the  Edges 


tech-savvy  business  users 
are  increasingly  tapping  consumer- 
type  apps  and  other  shadow  systems 
to  do  their  day-to-day  work,  there  is 
still  plenty  of  room  -  and  need  -  for 
innovation  from  IT.  experts  say. 
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At  the  Edges 
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ing  Uige  design  and  video  files.  CTO  Noah  Broad¬ 
water  took  notice,  and  then  conucted  YouSendIt  to 
secure  an  enterprise  version  of  the  popular  service. 

The  upshot:  “IT  has  become  a  trusted  business 
partner.  It  now  helps  users  with  contracts,  says 
Broadwater. 

The  IT  group  also  launched  a  dedicated  R&D 
group  that  focuses  specifically  on  consumer  tech¬ 
nologies  and  works  on  projects  dealing  with  how  to 
best  leverage  Facebook.  Google,  Twitter  and  mobile 
devices.  Broadwater  is  fond  of  pointing  out  that 
Sesoine  Street  character  Big  Bird  has  been  tweeting 
for  the  last  two  and  a  half  years. 

"By  having  early  adopteis  in  IT  and  getting  ahead 
of  technologies,  users  will  now  come  to  us  when  they 
want  to  use  something  like  Basecamp  [a  Web  app 
for  storing,  ioordinating  and  managing  pro|ectsj,” 
Broadwater  explains.  “When  they  do,  we  tell  them 
about  Central  I>esktop,"  which  he  describes  as  a 
similar  cloud-based  project  management  service  “but 
with  better  integration  into  the  enterprise," 


The  challenge  is  that  sometimes  when  something  has 
been  OK’d,  then  it’s  not  cool.  There’s  a  coolness  to  being  in 
the  shadows,  which  drives  me  nuts. 


Today,  Sesame  Street  co-producers  in  offices  as  far 
away  as  Af^anistan  and  Pakistan  can  upload  rough 


paying  for  Amazon  on  their  own,  why  not  give  it  to 
them?  You  become  part  of  shadow  IT  and  the  lines 
start  to  blur,”  he  says.  “IT  is  expanding  its  influence, 
and  mote  importantly,  you’re  working  as  a  team.” 

But  there  is  a  downside. 

“The  challenge  is  that  sometimes  when  something 
has  been  OK’d,  then  it’s  not  cool,"  says  Lillie.  “There’s 
a  coolness  to  being  in  the  shadows,  which  drives  me 

Redefine  irs  Role  as  Educator 
and  Policymaker 

“Consumerization  of  IT  is  an  inevitable  reality,”  says 
Kraft’s  Dajani.  One  of  IT’s  expanding  roles  in  this 
new  world  is  to  develop  and  implement  security  and 
other  policies  that  help  rather  than  hinder  employees, 
regardless  of  the  device  they  use  to  do  their  work. 

Kraft,  for  example,  is  virtualizing  its  applications 
environment  so  mobile  workers  in  particular  can  use 
the  device  of  their  choice.  “But  users  have  to  keep 
their  versions  of  software  up  to  date,  and  we  keep 
track  of  that,”  Dajani 
says.  “If  people  are 
running  software  on 

nmglldb  ^  ^  to  date  after  30  days,  we 

less  to  being  in  lock  them  out  - 

“We  need  to 
empower  employees, 
but  we  also  need  to 
teach  them,"  he  adds. 

;!!!!!!!  1  ^  •  ToddCoombes, 

.  CIO  at  insurer  CNO 

in  Indianapolis, 

I  works  with  his  peers  in  the  lines  of  business  to 

develop  policies  that  will  worit  for  both  IT  and  users 


For  example,  the  enterprise  YouSendIt  service,  which 
costs  $50,000  for  two  years,  replaced  FTP  services 
that  were  costing  $140,000  for  the  same  period.  Simi¬ 
larly.  before  using  Central  Desktop,  staffers  were  phys¬ 
ically  shipping  hard  drives.  The  cloud-based  service 
has  cut  those  costs  by  $20,000,  Broadwater  says. 

At  Equinix.  Lillie  set  up  an  “Amazon  sandbox"  for 
developers  who  were  buying  Amazon’s  cloud  services 
on  their  own  to  develop  apps. 

Developing  apps  on  Amazon,  he  says,  is  great 
“because  it  doesn’t  tax  FTs  resources.  But  as  opposed 
to  employees  pulling  out  their  credit  cards  and 


their  mobile  devices  a  list  of  potential  clients  who 
ate  turning  64  years  old.  along  with  directions  to  the 
clients’  homes. 

“  'We’re  in  this  together’  is  now  much  more  than 
a  tagline,”  says  Rick  Bauer,  a  former  CIO  and  now 
director  of  product  management  at  CompTIA,  a 
provider  of  vendor-neutral  certifications  for  IT 
professionals.  “No  one  else  is  going  to  educate  the 
enterprise  about  using  devices  in  ways  that  boost  pro¬ 
ductivity  and  in  ways  that  are  safe.  IT  has  got  to  be  a 
leader  in  helping  people  to  think  about  these  things." 
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Whenever  Wherever 


W'llh  Box.  I  mi  th.  , 


82%  of  Fortune  500s  Manage  Content 
Simply  and  Securely  With  Box 


DON’T  WAIT  UNTIL  THE  LAWYERS  COME  CALLING  TO  FIGURE 
OUT  IF  YOU  CAN  FIND  YOUR  CLOUD-BASED  DATA.  ByTamHarbert 
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eDI  Group,  i  consulting  firm  specializing  in  e-discov¬ 
ery.  “That's  not  necessarily  the  case." 

Under  the  Federal  Rules  of  Civil  Procedure,  a  party  to 
litigation  is  expected  to  preserve  and  be  able  to  produce 
electttxiically  stored  information  that  is  in  its  "posses¬ 
sion,  custody  or  control."  But  in  the  cloud,  the  situation 
isn't  so  clear.  Information  that's  electronically  stored  in 
the  cloud  is  presumably  under  your  control,  but  it  may 
not  technically  be  in  your  possession,  says  James  M. 
Kunick,  principal  and  chai'r  of  the  intellectual  property 
and  technology  practice  at  law  firm  Much  Shelist. 

Because  this  area  is  so  new.  the  legal  ramifications 
of  storing  data  in  the  cloud  are  still  murky.  Among  the 
few  instances  of  relevant  case  law  is  Gordon  Partners  v. 
Blumenlhal,  which  found  that  if  a  company  has  “access 
to  documents  to  conduct  business,  (then)  it  has  posses¬ 
sion.  custody  and  control  of  the  documents  for  purpose 
of  discovery,”  according  to  Murphy. 


That  finding  could  pose  a  significant  problem. 
Depending  upon  the  relationship  it  has  with  its  cloud 
vendor,  a  company  might  not  know  exactly  where  its 
data  is  stored.  And  even  if  it  does,  it  might  not  be  able 
to  access  information  in  the  cloud  in  the  right  format 
and  in  a  timely  manner. 

And  there  is  a  danger  that  companies  can  lose 
control  over  access  to  that  data  —  opposing  attorneys, 
for  example,  might  subpoena  not  only  your  company, 
but  also  your  cloud  provider.  “You  need  to  make  sure 
your  contract  with  the  provider  allows  you  to  control 
what  happens  if  they  get  a  subpoena,"  Kunick  warns. 

Know  the  Potential  Problems 

And  yet  most  companies  are  blissfully  unaware  of  the 
potential  problems  with  e-discovery,  says  Murphy.  In 
a  recent  survey  of  legal  and  IT  professionals  who  use 
cloud  services,  Murphy  found  that  less  than  i6%  of  172 
respondents  had  put  an  e-discovery  plan  in  place  before 
moving  data  to  the  cloud.  Even  more  alarming,  he  says, 
nearly  60%  of  the  respondents  said  that  they  didn't 
know  whether  they  had  an  e-discovery  plan  or  not. 

In  another  survey,  conducted  last  year  by  Clearwell 
Systems  (an  e-discovery  vendor  acquired  by  Symantec 
last  year)  and  consulting  firm  Enterprise  Strategy 
Group,  nearly  60%  of  more  than  too  Fortune  2000 
enterprises  and  government  agencies 


said  they  felt  that  their  cloud-based  applications  could 
potentially  be  subject  to  e-discovery. 

In  the  same  survey,  however,  only  26%  of  the  re¬ 
spondents  said  they  considered  themselves  somewhat 
or  very  prepared  for  e-discovery  requests.  In  other 
words,  says  ESG  analyst  Katey  Wood,  “they  said  yes. 
they  think  they'll  have  litigation,  but  no,  they  are  not 
prepared  for  it." 

Murphy  says  he  thinks  lawyers  might  even  start  to 
target  cloud-based  sources  of  information,  hoping  to 
catch  opponents  unprepared,  A  wily  opposing  attorney 
could,  for  example,  request  discovery  of  data  in  a 
software-as-a-service  provider's  system,  knowing  that 
most  companies  have  little  experience  collecting  data 
from  that  particular  source. 

"Until  we  have  a  successful  anecdote  in  which 
someone  gets  sued  and  they  run  their  search  success¬ 
fully  on  dau  in  the  cloud,  until  they’ve  actually  done  it  at 
speed  and  to  scale,  we  won’t  really  know"  how  prepared 
companies  are  for  e-dijeovery  in  the  cloud,  he  says. 

Tom  Conophy,  QO  of  InterContinental  Hotels  Group, 
is  one  executive  who  believes  he's  got  his  bases  covered. 
One  of  the  $18  billion  hospitality  company’s  many  cloud 
initiatives  is  a  project  to  move  its  global  reservations 
system,  now  on  a  mainframe,  to  the  cloud. 

IHG  is  in  the  process  of  choosing  a  cloud  provider.  In 

discussions  about  contract  terms,  the  company  is  being 
“very  careful  about  making  sure  that  our  intellectual 
property  and  our  content  is  outs,  and  that  at  any  given 
time  we  have  the  abiUty  to  access  it,  export  it,  turn  it  off 
—  whatever  we  need  to  do  with  it,”  says  Conophy.  “It’s  no 
difierent  than  if  k  was  rutmii^  in  our  own  [data  center]." 

Be  Mindful  of  Email,  Social  Media 

Potential  e-discovery  problems  vary  depending  on  the 
type  of  cloud  provider  and  the  contract,  observers  say. 
Because  email  has  been  subject  to  e-discovery  for  a 
while,  many  email  hosting  providers  have  this  covered 
in  their  contracts.  And  large  cloud  vendors  that  typi¬ 
cally  serve  Fortune  500  companies  are  likely  to  pay 
more  attention  to  the  discoverability  of  data. 

With  other  providers,  the  area  can  be  murky.  “A  lot 
is  negotiated  on  a  vendor-by-vendor  basis,"  says  Wood. 
The  ease  with  which  you  can  get  data  out  <rf  a  SaaS- 

based  system  depends  on  the  vendor.  Salesforce.com,  for 
example. "  is  not  an  easily  searchable  system  —  because 
it's  not  a  content  management  system  per  se  —  and  yet 
people  are  storing  information  there,"  says  Murphy. 

Social  media  represents  a  big  challenge.  Sites  such  as 
Facebook,  Linkedin  and  Twitter  rely  on  standard  con¬ 
tracts  with  users  —  both  individuals  and  organizations 
that  use  the  services  for  marketing.  What  if  a  company 
wants  to  retrieve  something  a  former  employee  wrote  on 
Facebook?  If  the  individual  posted  the  comment  on  his 
personal  account,  the  company  has  no  right  to  access  it. 

That  means  companies  must  consider  constantly 
collecting  the  content  of  all  employees'  posts  as  a 
safeguaid.  Certain  regulated  companies  in  financial 

Continued  on  pqge  28 
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CLOUD  COMPUTING 


Coniinunl  from  page  i6 

services  already  do  this,  notes  Murphy. 

Companies  that  don't  do  that  mi^t  encounter  dif¬ 
ficulties  if  they  need  to  retrieve  content  from  social 


can  write  to  their  open  APIs  to  get  the  data  they  need, 
“accessibility  chan^  on  a  regular  basis  as  the  APIs  of 
the  vendors  change,”  Murphy  points  out. 

In  addition,  how  long  would  it  take  to  download  all  the 

data?  Murphy  says  most  sites  “throttle  their  APIs,"  which 

could  slow  downloads  or  search  results.  Some  e-discovery 
service  providers  have  started  to  target  this  problem. 
“They  pay  a  lot  of  money  to  be  in  these  API  programs," 

he  says.  “They  are  essentially  buying  less  throttling.” 

Know  the  Location  of  Your  Data 

Whatever  type  of  cloud  you’re  dealing  with,  it's 
imporunt  to  know  exactly  where  your  data  resides. 

In  some  cases,  a  cloud  vendor  might  be  storing  it  in  a 
dau  center  in  a  different  country,  where  different  data 
privacy  and  e-discovery  rules  apply. 

Further  complicating  matters  is  the  possibility  that 


FLAVORS  OF 
E-DISCOVERY 


tBTNCCMCWIhaa 


ms  story  fecuses  on  t^liscoyerv  o«  i«a  that  has  been 
stored  in  the  doud.  But  e^liscoverY  aiHl  the  cloud  inters 
in  a  nuniber  of  ways.  Here's  how  Christine  Tiykir,  an  anah^ 


ushw  the  cloud  to  deliver  tools  used  for  e^lisco*etv.  These  SaaS  packages 
typhallv  cover  on*  of  several  e^Hscovery  tasks,  such  as  co«ection.pfeser- 


7:  E-dfscovery  hi  the  doud  can  also  mean  hiring  a 
scovery  on  data  stored  m 
ry.in  one  scenario,  a  cost 
andbig  that  the  doudvei 


in  the  doud  involves  e^Bscovery  on  dau  that  a  user  has  stored  hi  the  doud 
the  rnost  mated  doud  vendors  “are  notoriously  poor,"  she  wrote  hi  a  re- 
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tractors.  That’s  frequently  the  case,  says  Kunick 
meaning  "it’s  mote  than  likely  that  your  data  will 
reside  in  several  locations."  Even  if  you  have  an  iron¬ 
clad  contrart  with  your  primary  provider,  can  that 
vendor  access  information  in  a  prompt  and  defensible 
way  if  the  data  is  held  by  a  subcontractor? 

Before  there  was  a  cloud,  companies  would  contract 
with  large  managed  service  providers  and  would  spell 
out  most  of  these  provisions  in  long,  dewiled  contracts, 
Kunick  says.  But  most  contracts  with  cloud  providers 
don’t  cover  such  deuils.  "With  cloud  service  providers, 
the  contracts  ate  seldom  longer  than  10  pages,”  he  says. 

Beware  Renegade  Business  Units 

Even  if  contracts  cover  every  detail,  shadow  IT  ac¬ 
tivities  within  corporations  can  be  a  source  of  other 
e-discovery  problems.  Charles  Skamser,  president  and 
CEO  of  consulting  firm  eDiscovery  Solutions  Group, 

has  spent  several  months  interviewing  some  60  cloud 

service  providers.  Most  told  him  that  their  clients  aren’t 
asking  about  e-discovery.  In  fact,  "some  [cloud  service 
prtjviders]  even  said,  'What’s  e-discovery?’ "  Skamser 
reports.  In  what  may  be  a  mote  telling  finding,  Ska- 
mser’s  research  indicates  that  a  high  percenuge  of 
cloud  customers  are  “renegade  business  units"  of  big 
companies  seeking  to  do  an  end  run  around  what  they 
perceive  as  unresponsive  internal  IT  organizations  (see 
"The  Upside  of  Shadow  IT.  ”  page  18). 

This  could  be  a  recipe  for  disaster.  If  a  large  corpora¬ 
tion  is  sued  and  presented  with  an  e-discovery  request, 
the  general  counsel  would  likely  ask  the  IT  depart¬ 
ment  for  help.  The  attorney  might  not  ask  a  particular 
business  unit,  and  even  if  he  did,  the  business  unit’s 
manager  probably  wouldn’t  know  what  to  do  and  the 
unit’s  contract  with  the  vendor  probably  wouldn’t 
include  any  e-discovety  provisions,  Skamser  explains. 

Develop  a  Comprehensive  Plan 

Above  all,  a  corporation  should  have  a  comprehensive  in¬ 
formation  governance  and  discxnrery  plan  that  covets  all 
sources  of  data,  including  the  cloud,  says  Murphy.  The 
plan  needs  to  covet  not  only  how  to  conduct  e^liscovety 
on  data  stored  in  the  cloud,  but  also  how  to  review  that 
data  alongside  data  residing  elsewhere.  “You  need  to 
apply  the  same  discipline  on  all  data  sources,”  he  notes. 

It’s  not  too  late  to  prepare  for  e-discovery  on  cloud- 
based  data,  says  Murphy.  "Best  practices  are  beginning 
to  emerge,  and . . .  companies  have  the  opportunity  to 
get  ahe^  of  the  curve,”  he  wrote  in  a  recent  report. 

"The  key  is  to  treat  cloud-based  sources  of  data  like 
any  other  data  source,”  says  Murphy.  “Include  it  in 
dau  maps,  have  a  plan  for  collecting  and  preserving 
it,  know  how  to  manage  the  chain  of  custody,  and 
understand  when  to  dispose  of  the  dau  so  that  it  poses 
no  e-discovety  ris"  " 
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Today,  97%  of  the  Fortune  Global  500  rely  on  VMware,'  the  global  leader  in  virtualization 
and  cloud  infrastructure.  With  VMware,  you  can  leverage  your  existing  IT  investments  as 
you  transition  to  a  secure,  managed  and  controlled  cloud  solution.  Because  it’s  not  about 
getting  to  the  cloud.  It’s  about  getting  to  your  cloud.  \A/3  TO 

The  power  behind  your  cloud. 


Visit  vmware.com/whiteboard 
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HELP 

FOR  THE  HELP  DESK 


Organizations  work  to 
improve  the  heip  desk 
by  finding 'teaching 
moments'  for  users  and 
focusing  on  efficiency. 

BY  JOHN  BRANDON 


A  HELP  DESK  can  be  a  real  lifesaver 

for  employees,  not  to  mention  a  pro¬ 
ductivity  boost.  If  a  keyboard  stops 
working  or  Outlook  k^s  crashing, 
a  technician  is  just  a  phone  call 
away.  Even  complex  problems  can 
usually  he  resolved  internally,  and 
relatively  quickly,  without  the  need 
for  an  outside  vendor. 

Yet,  help  desk  technology  U  typically  slow  to  evolve.  Many 
large  organizations  still  track  tickets  in  complex,  aging 
systems  that  aren't  adept  at  pinpointing  recurring  problems. 
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don't  work  well  on  the  latest  smartphones  or  tablets, 
and  don't  (Movide  detailed  reports  about  average  call 
times  or  how  long  it  takes  to  resolve  issues. 

“Most  corporate  help  desks  are  outdated,"  says 
Gartner  analyst  Jarod  Greene.  Many  organizations  are 
stuck  using  to(^  that  merely  report  on  the  number  of 
calls  per  day,  month  arxl  year  and  don't  have  a  clue  about 
what  he  calls  “feedback  loops"  —  in  other  words,  the 
recurring  problems  within  an  organization.  That’s  a  criti¬ 
cal  issue,  Greene  says,  because  over  50%  of  the  perceived 
value  (rf  an  IT  organization  comes  firon  the  help  desk. 

So  if  the  helpdesk  is  stuck  in  the  1990s  tech¬ 
nology-wise,  It's  a  good  bet  that  IT’s  reputation  is 
suffering,  too. 

“They  end  up  automating  bad  (xocesses,  and  fail  to 
gain  real  efficiencies  from  the  investment,"  Greene  says. 

Some  o^anizations  have  found  a  way  to  improve 
the  help  desk.  Whether  it’s  a  “teaching  moment  ’  at 
the  University  of  Georgia,  a  system  that  provides 
more  efficient  tracking  at  Peugeot,  or  a  way  to  watch 
for  ticket  patterns  at  De  Beers  Canada,  the  help  desk 
is  getting  a  much  needed  assist. 


University  of  Georgia: 

At  the  University  of  Georgia,  with  10,000  employees 
and  an  enrollment  of  around  35,000  students,  the 
help  desk  staffers  have  to  perform  triage  on  support 
requests  quickly,  resolve  them  if  possible,  and  then 
pass  the  tough  cases  up  to  second-level  support. 

When  calls  are  escalated,  the  help  desk  shifts 
gears.  According  to  Rachel  Moorehead,  an  IT  profes¬ 
sional  assistant  and  supervisor  at  the  university,  calls 
become  more  than  just  a  way  to  resolve  problems. 

“Every  call  is  a  teaching  moment,”  she  says,  de¬ 
scribing  how  help  desk  staffers  tailor  each  interaction 
to  the  callers  technical  expertise.  When  an  IT  major 
calls  in  about  a  problem  with  a  login  to  an  Outlook 
server,  for  example,  staffers  might  explain  how  the 
logging  files  woA.  Even  if  the  student  is  not  an  IT 
major,  they  still  pass  along  tips  —  and  generally  find 
that  every  student  and  faculty  member  is  open  to  tbe 
advice.  The  university  uses  BMC  Remedy  to  log  the 
initial  call,  and  then  Bomgar  for  screen-sharing. 

Moorehead  estimates  that  almost  all  of  the  univer¬ 
sity's  second-level  IT  support  tickets  involve  some  sort 
of  extra  instruction. 

Because  support  calls  are  focused  on  educating 
users,  the  goal  is  not  necessarily  to  resolve  problems 
quickly.  The  average  resolution  time  for  su|^ort  calls 
is  5.17  hours,  and  an  aver^  screen-sharing  session 
lasts  33  minutes.  This  compares  to  an  industry 
average  of  one  day  for  resolvii^  issues  of  low  to 
medium  severity,  according  to  Greene. 

The  help  desk  handled  4,395  support  calls  in  the 
month  of  November  alone,  customizing  responses  to 
the  needs  of  the  users  and  their  specific  problems. 


“This  is  the  IT  help  desk  equivalent  of  give  a  man  a 
fish  and  you  feed  him  for  a  day.  but  teach  him  to  fish 
and  you  feed  him  for  a  lifetime.’  *’  says  Cliarles  King, 
an  analyst  at  Pund-IT. 

Greene  says  the  university  is  on  the  right  track 
in  how  it  uses  a  tiered  strategy.  The  first  le\^l  r<>ots 
out  problems  quickly;  the  second  tier  uses  remote 
sessions  to  provide  more  thorough  support.  That's 
important,  he  says,  because  of  the  average  costs 
involved. 

Initial  calls  to  IT  support  can  cost  a  company  Si  to 
$10  per  ticket;  that's  just  for  initial  contact  by  phone 
or  email  to  log  the  issue.  Once  the  call  gels  to  an 
actual  human  for  first-level  su[^rt,  the  cost  rises 
to  between  $10  and  $37  per  transaction.  If  a  more 
technical  staff  member  becomes  involved  for  sec*ofid- 
level  or  even  more  complex  issues,  the  costs  are  $37 
to  $250  per  ticket. 

“Using  a  remote-control  and  collaboration  solution. 
Level  2  can  help  Level  i  resolve  issues  more  efficiently, 
with  the  goal  being  to  reduce  escalations,"  say's  Greene. 
“In  tbe  .same  context.  Level  t  can  lise  remote  control  to 
teach  end  users  howto  resolve  their  own  issues  or  guide 
them  to  knowledge-management  documentation." 

The  point  is  not  just  to  correct  some  problem  or 
mistake,  but  to  help  ensure  that  the  end  user  under¬ 
stands  what  caused  the  problem  and  will  k^o^^'  hen^' 
to  prevent  or  address  similar  problems  in  the  future. 
King  says.  Ideally,  this  approach  will  lead  to  fewer 
help  desk  calls  or  "at  least  a  better  informed  and  more 
capable  workforce.” 


Peugeot  Netherlands: 

The  Netherlands  branch  of  French  automaker 
Peugeot  supports  179  car  dealerships  throughout 
Europe  and  another  160  commercial  users  in  the 
head  office  in  Utrecht.  The  help  desk  employs  26 
technicians  and  processes  about  3,750  tickets  per 
year,  or  about  72  each  week,  on  average. 

Richard  Nolting,  the  help  desk  manager,  says  the 
company  wanted  to  improve  efficiencies.  In  2010,  the 
help  desk  was  resolving  almost  90%  of  support  issues 
in  2.4  days  on  average,  bettering  a  goal  of  set  by 
the  standards  body  ISO,  but  Peugeot  wanted  to  do 

The  company  also  wanted  more  flexibility.  Nolting 
says  some  help  desk  systems  are  overly  'canned,'  with 
automatic,  robotic-sounding  messages  sent  back  to 
users.  To  make  the  communication  more  personal¬ 
ized,  Peugeot  needed  more  features.  For  example, 
Nolting  says,  he  wanted  a  system  that  lets  technicians 
send  SMS  alerts  to  users  so  IT  staffers  can  communi¬ 
cate  from  wherever  they  happen  to  be  in  the  building. 
Other  goals  included  building  a  knowledge  base  of 
support  calls  and  allowing  users  to  create  their  own 
personalized  tickets. 
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The  company  started  using  Kayako,  a  collaborative 
help  desk  program.  Ndting  says  a  key  feature  is  the 
ability  for  every  agent  to  access  all  support-related 
emails.  When  agents  create  a  ticket,  they  enter  a 
user  profile.  Agents  can  then  click  an  option  to  start 
a  voice-over-lP  call,  engage  in  live  chat,  or  begin  a 
screen-sharing  session. 

While  other  help-desk  tools  might  allow  these  activi¬ 
ties,  Nolting  says,  they  ate  more  ad  hoc  and  not  neces¬ 
sarily  recorded  as  part  of  the  support  call.  Tracking  is 
important  to  him,  because  it  helps  his  organization 
avoid  having  to  manually  sort  and  manage  tickets. 


MOST 

ARE  OUTDATED. 


explaining  how  tickets  can  be  automatically  assigned 
to  specific  managers  and  tracked  accordingly.  Over 

the  past  year,  he  says,  support  calls  have  improved  to  a 

saine-day  resolution  average  of  around  94%.  And  the 

total  time  to  resolve  support  issues  changed  to  1.8  days 

on  avert^.  down  from  2.4  days. 

Tracking  all  tickets  is  immensely  helpful  in  the  long 
term,  says  Greene.  “Only  well-documented  processes 

can  be  transformed  into  structured  workflows.  So  if  the 

dau  is  not  captured  in  ticketing  tods,  it  will  be  hard 

to  find  and  retise  should  the  [same]  issues  ever  arise 

again."  Tods  like  Kayako  "ke^  out-of-band  conversa¬ 
tions  from  going  into  the  garbage,  and  let  IT  c^ations 
groups  and  administrative  teams  better  understand 
work  patterns  in  support  of  processes,”  he  says. 

Peugeot  is  using  Kayako  both  to  simplify  the 
query  process  and  as  a  tracking  and  auditing  tool, 
says  Pund-lT’s  King.  "This  should  help  increase  the 
efficiency  of  help  desk  processes,  but  it  also  creates 
records  to  fulfill  internal  auditing  processes,"  he  says. 
Another  potential  benefit:  Search  and  analytics  could 
be  applied  to  gain  insight  into  recurring  problems  or 
employee  and  dealership  usage  patterns. 


De  Beers  Canada: 

De  Beers  Canada,  the  mining  atm  of  a  company 
probably  best-known  in  the  U.S.  for  its  high-end 
jewelry  stores,  has  found  a  way  to  make  the  help 
desk  entirely  paperless.  With  two  remote  mines  of 
about  400  employees  each,  and  headquarters  in 
Toronto  with  about  too  employees,  the  company 
wanted  to  streamline  operations.  One  goal  was  to 


reduce  the  number  of  help  desk  tickets. 

lames  Ross,  corporate  IT  manager  for  the  (lelp  desk, 
says  the  company  has  reduced  tickets  from  700  per 
month  to  about  500.  One  method  for  streamlining: 
Tickets  ate  grouped  according  to  incidents,  so  techni¬ 
cians  can  address  the  toot  cause  and  prevent  more 
calls  about  the  same  problems.  They  achieved  this  by 
monitoring  help  desk  tickets  and  predicting  problems 
rather  than  waiting  for  things  to  happen. 

For  example,  obey  used  to  be  surprised  by  requests  for 
new  hardware  or  business  software.  But  now  help  desk 
staffers  can  see  patterns  from  the  same  department, 
around  the  same  time  of  year,  and  can  be  better  pre¬ 
pared  for  those  requests  if,  say,  bandwidth  is  a  problem. 

De  Beers  uses  ManageEngines  Service  Desk  Plus 
to  group  tickets,  send  SMS  alerts  to  IT  staffers,  and 
record  electronic  signatures  for  all  tickets.  Although 
the  company  does  not  use  the  mobile  version  of  the 
app  today,  it  plans  to  add  that  capability. 

Ross  says  a  key  new  feature  is  that  all  help  desk 
activities  are  audited  and  can  be  monitored  remotely, 
which  is  helpful  for  workers  in  Toronto  trying  to  solve 
problems  at  the  mines.  This  remote  monitoring  used 
to  be  an  ad  hoc,  manual  process. 

The  reporting  has  an  added  benefit  beyond  audit¬ 
ing  requirements:  UndersUnding  root  causes. 

“Most  organizations  can't  perform  trend  analysis 
on  tickets  —  they  just  react  to  them  as  they  occur,” 
says  Ross,  who  adds  that  the  company  also  uses  the 
help  desk  for  facility-related  requests,  such  as  build¬ 
ing  repairs  or  HVAC  upgrades,  and  may  start  using 
it  for  human  resources  activities  such  as  processing 
new  hires  and  departmental  changes.  The  company's 
help  desk  system  requires  staffers  to  log  calls  and 
track  tickets,  and  there's  no  reason  the  same  software 
can't  he  applied  to  monitor  other  types  of  activities. 

“De  Beets  is  following  a  path  similar  to  Peugeot's, 
thot^  it  seems  a  bit  more  structured  on  the  front  end 
—  e.g.,  proactive  grouping  linked  to  root  causes,”  says 
Pund-lT's  King.  "Running  the  process  remotely  should 
also  allow  the  company  to  manage  and  support  widely 
dispersed  facilities  and  workers,  or  to  consider  engag¬ 
ing  a  third  party  to  operate  the  [help  desk]  service  at 
some  future  point.” 

In  each  of  these  examples,  one  thing  is  clear: 

The  help  desk  is  more  than  a  place  to  call  for  help. 
Organizations  ate  using  support  tools  to  teach 
users  to  solve  their  own  problems,  generate  detailed 
reports  that  help  identify  toot  causes,  and  comply 
with  complex  auditing  requirements  by  tracking  and 
monitoring  all  calls. 

While  the  basic  idea  of  keeping  employees  produc¬ 
tive  is  a  driver,  improving  overall  processes  in  the 
company  can  be  a  major  secondary  benefit  when  the 
help  desk  gets  the  latest  tools.  ♦ 

Brandon  is  a  former  IT  manager  al  a  Fortune  too 
company  who  now  writes  about  technotigy.  He  has 
written  more  than  2,500  articles  in  the  past  10  years. 

You  can  follow  him  on  IWitter  (igjmbrandonbb). 
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LET’S  STOP 
COMPROMISING 
MOBILE  SECURITY  FOr 
MOBILE  DIVERSITY 


INTRODUCING  BLACKBERRY  MOBILE  FUSION. 
Now  all  personal  and  corporate-owned  BlackBerry,' 
iOS  and  Android  devices  can  seamlessly  access 
business  data  and  applications  on  a  single, 
secure  management  platform.  To  find  out  how 
this  new  approach  will  end  mobile  chaos,  visit 
blackberry.com/mobilefusion 


“‘BlackBerry 

Be  Bold 


Journal 

Who’S  Got  Your  Mail? 


I’M  ALWAYS  AMAZED  by  the  various 
ways  that  security  dehciencies  find 
their  way  to  the  top  of  the  ocean 
—  you  know,  that  ocean  we’re  all 
trying  to  hoil. 

Last  week,  one  of  the  managers  in  our 
sales  department  discovered  a  security 
lapse  by  chance.  He  had  terminated  one 
of  his  sales  associates  and  wanted  to 
review  that  person's  email  for  correspon¬ 
dence  related  to  outstanding  sales  deals. 
We  give  such  managers  access  to  their 
reports'  Exchange  mail  for  just  this  sort 
of  situation. 

The  manager  was 
typing  in  the  person's 
name,  and  it  auto-filled 
before  he  could  finish.  So 
he  clicked  OK  and  started 
looking  around.  But  hold  on  —  the  inbox 
seemed  to  belong  to  one  of  our  execu¬ 
tives,  not  the  terminated  sales  assocUte. 
Auto-fill  had  provided  the  name  of  the 
executive,  and  the  sales  manager  hadn’t 
noticed.  That  wasn’t  a  problem  —  but 
how  was  h  that  he  had  then  been  able  to 
open  the  inhox? 

Fortunately,  the  manager  called  the 
CIO  to  explain  what  had  happened. 
Naturally,  the  CIO  then  called  me. 

I  found  out  that  the  executive's  email 


was  configured  to  give  any  employee  in 
the  company  access.  Of  course,  we  im¬ 
mediately  dialed  that  back  so  that  the  ex¬ 
ecutive’s  admin  was  the  only  person  with 
access  other  than  the  executive  herself. 
Then  I  called  together  my  mcident  re¬ 
sponse  team;  one  of  my  security  analysts, 
the  lead  Exchange  administrator,  the 
manager  of  the  help  desk  and  a  few  other 
IT  folks.  We  began  investigating  and 
brainstorming  likely  scenarios. 

First,  we  checked  logs  to  see  who  had 
configured  access  for  that  inbox  and  who 
had  accessed  it  —  or 
we  set  out  to  do  that, 
but  there  were  no  logs 
enabled  for  either  the 
executive’s  desktop  or 
the  Exchange  server. 
Seems  we  hadn’t  enabled  these  types  of 
logs  because  they  consume  a  lot  of  disk 
space  and  cause  performance  issues. 

I  then  had  my  security  analyst  search 
our  security  incident  and  event  manage¬ 
ment  (SIEM)  tool  for  any  sign  that  the 
executive’s  PC  had  been  afflicted  by 
malware.  1  also  had  him  ensure  that  no 

resident  malware  was  running  on  it.  , 

Next,  1  reviewed  help  desk  tickets. 
Sure  enough,  a  ticket  had  been  opened 
about  four  months  earlier  to  configure 


access  to  the  executive’s  calendar.  The 
technician  who  had  completed  the  ticket 
assured  me  that  he  had  delegated  access 
only  to  the  executive’s  admin. 

I  wondered  whether  other  users’ 
inboxes  might  be  similarly  exposed,  so  I 
had  one  of  the  Exchange  administrators 
generate  a  report  to  tell  us  if  any  mail¬ 
boxes  were  configured  for  global  access. 
Sure  enough,  several  more  executives 
had  improperly  configured  mailboxes, 
along  with  about  40  other  employees. 

Interestingly,  the  help  desk  tickets 
showed  that  the  same  technician  who 
had  been  responsible  for  the  original 
executive’s  Exchange  configuration  had 
also  configured  the  delegated  access  for 
the  other  executives  with  wide-open 
inboxes.  Logic  suggested  we  had  found 
the  root  of  the  problem. 

The  technician’s  manager  and  I 
decided  to  hold  a  training  session  for  the 
help  desk  on  the  proper  configuration  of 
delegated  access  to  Exchange  inboxes. 
And  who  better  to  conduct  this  train¬ 
ing,  we  figured,  than  the  very  help  desk 
technician  who  seemed  to  have  been 
doing  things  wrong.  No  finger-pointing, 
but  this  approach  should  ensure  that 
the  person  most  in  need  of  the  training 
really  got  the  lesson. 

We  ate  also  working  to  make  logging 
possible  on  the  Exchange  server  and  to 
direct  the  logs  to  our  SIEM  tool.  And  we 
are  investigating  ways  to  keep  people 
from  enabling  delegated  access  without 
first  opening  a  help  desk  ticket.  If  that 
doesn’t  work,  we’ll  have  to  ensure  all 
employees  are  trained  on  the  proper  use 
of  this  configuration. 

And  now  I  have  an  additional  audit  to 
add  to  my  list  of  tegular  activities.  ♦ 
This  week’s  journal  is  written  by  a  real 
security  manager.  “Mathias  Thurman,” 
whose  name  and  employer  have  been  dis¬ 
guised  for  obvious  reasons.  Contact  him  at 


More  executives  had  Improperty  configured 


mailboxes -as  did  about  40  other  empioyees.  I  mafhias_thurman@))ahoo.com. 
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Facebook + Instagram  = 

One  Big  Acquisition  Flop 

When  you  boil 
it  all  down, 
Facebookis 
spending  $1B 
for  some  Web 
2.0  software. 

■  KNOW,  1  KNOW.  Facebook’s  acquisition  of  Instagram  hasn’t  even 

1  been  finalized  yet  and  I’m  already  calling  it  a  complete  waste  of  a 

1  billion  dollars.  How  can  I  say  that?  Easy. 

B  Let’s  look  at  the  facts,  shall  we?  Facebook  paid  about  $28  for  each  of 
Instagram’s  35  million  users.  As  such  things  go,  that  doesn’t  seem  so  bad 

—  as  long  as  Instagrams  users  stick  arcMind.  But  on  their  images  will  move  to  another  platform, 

the  reality  is  that  feithhil  fans  of  the  f^ioto-sharing  What  the  heck,  though.  Mark  7ucl^rt)erg  is 

program  are  royally  ticked  off  by  the  deal.  Those  still  mostly  playing  with  fantasy  dollars,  and  if  he 

are  ffantic  to  get  their  pictures  out  of  insta-  wants  to  waste  a  billion  of  them  on  Instagram,  he 

gram  before  Facebook  takes  over  may  well  be  wary  doesn’t  have  stockholders  to  answer  to  —  yet. 

of  Facebot^’s  lousy  privacy  recwd.  If  you  don’t  And,  as  dumb  as  this  move  was,  it’s  not  even 

want  your  Instagram  photos  used  in  Facebook  ads,  close  to  such  winners  as  these: 

you’d  better  make  sure  you  have  your  privacy  set*  5*  News  Corp.  buyir^  MySpace  for  $580  million 

tings  adjusted  properly  —  and  then  hope  Facebook  in  2005.  It  finally  managed  to  dump  the  social 

doesn’t  change  its  privacy  settings  yet  again.  networic  for  less  than  a  dime  on  the  dollar  in  2011. 

Steven  J.Vaughan- 
Nkhols  has  been 
writing  about 

Moreover,  $28  per  user  is  cheap  only  if  Insta-  4.  Microsoft  grabbing  digital  marketing  ser- 

gram’s  users  aren’t  already  Facebwk  users.  In  its  vices  agency  aQuantive  for  $6  billion.  You  might 

pte-lPO  Si,  Facebook  claims  it  has  845  million  not  remember  this  one,  which  would  be  fine  by 

active  monthly  users.  1  strongly  suspect  that  Microsoft.  In  trying  to  play  catch-up,  it  paid  about 

there's  a  good  deal  of  overlap  between  that  twice  what  Google  had  paid  for  Doubleclick,  and 

845  million  and  Instagram's  35  million.  got  much  less  in  return. 

So  when  you  boil  it  all  down,  what  Facebook  $.  Oracle  acquiring  Sun  for  $7.4  billion.  Larry 

has  really  bought  is  some  Web  2.0  software  for  Ellison  claimed  that  he  bought  it  for  Java  and 

tweaking  pictures.  1  haven’t  programmed  in  years,  Solaris.  How’s  that  working  out  for  you,  Larry? 

but  1  bet  I  could  put  together  a  team  of  developers,  2.  Yahoo  paying  a  combined  $9  billion-plus  for 

whip  up  an  Instagram  clone,  and  launch  it  on  the  Broadcast  and  GeoCities.  Yahoo  is  still  paying  the 

Ama2on  Elastic  Compute  Cloud  over  a  weekend.  price  for  these  two  badly  thought-out  1999  acquisi- 

technology  and  the 
business  of  technoiogv 
since  CP/M-80  was 
cutting-edge  and 
300bps  was  a  fast 
Internet  connection  - 
and  we  liked  it! 

He  can  be  reached  at 
sjvn@vnal.com. 

This  is  not  rocket  science.  tions.  Those  errors  in  judgment  seem  to  be  the 

Mind  you,  I’m  not  sure  that  Steven’s  Instagram  most  comparable  to  Zuckerbeig’s  mistake, 

would  be  worth  even  the  six  figures  it  would  cost  1.  Time  Warner  combining  with  AOL.  For  sheer 

to  build.  Today,  Instagram’s  cutesie  photo  fibers  dot-com  insanity,  you  can’t  beat  this  deal.  A  better 

ate  popular  —  but  they  generate  no  revenue.  To-  use  of  the  $350  billion  might  have  been  to  fuel 

morrow,  they  could  be  as  passe  as  Pet  Rocks.  electrical  plants  with  dollar  bills. 

Here’s  what  will  happen:  Facebook  won’t  see  a  But  seriously,  these  examples  represent  the  good 

noticeable  increase  in  users.  And  Instagram  fans  news  for  Zucketbetg  when  b  comes  to  the  Instagram 

who  loathe  the  idea  of  Facebook  getting  its  bands  deal:  it’s  not  the  worst  tech  acquisition  ever  made.  ♦ 
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RlJ  Roy  Cohen 

■  i;i(| aullKiroJ  rlu'  Wall 

Sirivt  Proli'ssioital's  Siii \ i\>il 

Watch 

(Inkle (((lIvSKiHini  li(iii(Hiii^a 

i  request  for  your  Facebook 

1  password  I  iohinlciricn' 

passvrord.  But  ttiere  is  always  a  consequence  for  any  decision  we 
make.  In  this  case,  if  you  refuse,  you  may  be  eliminated  as  a  candidate. 

It  is  possible  that  the  company  is  testing  you  and  your  good  judg¬ 
ment.  If  the  position  you  are  interviewing  for  requites  the  ability  to 
negotiate  unreasonable  terms  and  conditions,  then  not  providing  the 
information  requested  may  be  the  desired  response.  In  that  case, 
saying  no  with  grace  and  tact  may  be  viewed  as  an  asset  rather  than 
a  liability.  Before  you  jump  to  any  conclusion,  ask  about  the  request. 
Although  the  question  may  initially  appear  to  be  unreasonable,  it 
may  be  that  there  is  a  legitimate  reason  to  ask  it. 

some  pwfiffco  law  bqtn—t  of  wort  for  several  months 
might  not  hel  that  Jwst  w«lkh«  away  is  an  option.  What  can 
they  do?  Saying  no  is  not  the  only  option.  Offering  partial  informa¬ 
tion  and  an  explanation  may  satisfy  the  interviewer.  The  real  ques¬ 
tion  is  how  much  the  interviewer  needs  to  know. 
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^dtSearch 


Instantly  Search 
Terabytes  of  Text 

•  25+  fielded  and  full-text  federated  search  options 

•  dtSearch's  own  file  parsers  highlight  hits  in 
popular  file  and  email  types 

•  Spider  supports  static  and  dynamic  data 
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Build  your  own  newsletter  featuring  your  favorite  technology 
topics  cloud  computing,  application  development,  security  — 
over  200  timely  topics,  from  more  than  700  trusted  sources. 
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Place  your  Labor  Certification  Ads  Here 


Are  you  frequently  placing 
legal  or  immigration  advertisements? 

Let  us  help  you 
put  together  a 
cost-effective  program 
that  will  make  this 
time-consuming 
task  a  little  easier. 

Contact  us  at: 

800.762.2977 
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Plavins  the  Wrong  Hand 
With  Windows  8 


Microsoft  is 
gambling  its 
reputation  with 
its  upcoming 
operating 
system. 


ScotFInnteis 

Computermrlcfi 
editor  in  chief. 
You  can  contact 
him  at  sfinnie@ 
computefworld.com 
and  follow  him  on 
Twitter  OScotFinnie). 
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I  HE  PC  IS  DEFINITELY  NOT  DEAD  FOR  MICROSOFT  (and  it  won’t  be 
for  a  long,  long  time),  but  Windows  8  might  hasten  its  decline. 

On  a  tablet  that  properly  supports  Windows  8,  the  beta  version 
of  the  operating  system  shows  the  careful  thought  that  Microsoft 


put  into  its  design.  It  supports  more  elaborate 
gestures  than  other  tablet  operating  systems. 

There’s  also  a  cool  sidebar  feature  that  lets  you 
work  on  two  apps  at  the  same  time.  Some  of  the 
apps  that  Microsoft  is  creating  for  Windows  8  are 
a  little  too  simplistic  for  my  taste,  and  the  library 
<rf  third-party  Windows  Phone  7/8  apps  has  a  long 
way  to  go,  but  I’m  impressed  with  the  design  of 
Windows  8  on  tablets. 

But  with  Windows  8,  the  medium  is  the 
message.  Put  the  same  Consumer  Preview  of 
Windows  8  on  a  desktc^  PC  and  the  experience 
takes  a  step  backward  from  Windows  7.  It  looks 
like  the  baby  blocks  of  operating  systems.  Placing 
the  Start  button  in  a  cloak  of  invisibility  isn’t  a 
Smart  move.  It  shouldn’t  be  difficult  for  Microsoft 
to  display  the  Surt  button  on  desktops  while  not 
displaying  it  on  tablets;  I  hqre  the  company  recti¬ 
fies  that  before  launch.  Why  relegate  17  years  of 
common  desktop  user  experience  to  the  trash  can? 
It’s  reminiscent  of  the  Ribbon  in  Microsoft  Office. 

Will  Windows  8  be  successful  on  the  desktop?  Of 
course.  People  like  to  snicker  about  Wirtdows  Vista, 
but  according  to  Net  Applications,  Vista  has  a  larger 
market  share  (about  7%)  than  the  combined  share 

of  the  two  most  widely  used  versions  of  OS  X,  Lion 

and  Snow  Leopard.  With  the  huge  installed  base 
and  OEM  support  that  Windows  has,  Microsoft 
prints  money  with  every  operating  system  release. 

Even  so,  Microsoft  is  gambling  its  reputa¬ 
tion  with  Windows  8.  The  question  is  whether 
consumers  will  be  happy  with  it;  enterprise  buyers 
have  little  incentive  to  upgrade  over  the  short  run. 


Many  are  quite  Happy  with  Windows  7.  Think  of 
how  long  XP  lasted. 

That  means  that  for  the  next  couple  of  years, 
Windows  will  be  a  tablet  operating  system  that  sec¬ 
ondarily  targets  consumer  PCs.  Microsoft  is  playing 
catch-up  again,  this  time  in  mobile  computing,  but 
no  technology  company  plays  that  game  better.  It 
also  manages  its  platform  with  ISVs,  IHVs,  OEMs 
and  customers  better  than  any  other  tech  company. 
Nonetheless,  on  the  desktop,  Windows  8  is  grang  to 
be  a  leap  of  faith  that  many  may  not  take. 

Here’s  why  that  should  matter  to  Microsoft. 
Tablets  ate  selling  like  hotcakes,  right?  Yes,  but 
when  you  compare  the  tablet  market  and  the  PC 
market,  the  latter  is  quite  a  bit  larger.  Forrester 
says  that  two-thirds  of  the  smartphones,  tablets 
arid  PCs  used  in  business  ate  tunning  some  form 
of  Windows.  The  vast  majority  of  those  ate  PCs. 
Although  Forrester  expects  that  figure  to  drop 
to  50%  by  2016  as  iOS  and  Android  continue  to 
rise,  Microsoft  can’t  afford  to  abandon  its  huge 
installed  base  of  Windows  PCs  in  its  xeal  to  play 
catch-up  on  mobile. 

Plus,  Windows  8  tablets  have  a  steep  road  to 
climb.  An  IDC  report  predicts  that  Windows 
Phone  will  have  a  20%  share  of  smartphone 
shipments  in  2016.  The  same  report  predicts  that 
iOS  will  also  have  20%  of  the  shipments  and  that 
Android  will  have  47%. 

So  Microsoft  is  going  all  in  with  Windows*  in 
a  tablet  market  it  can’t  dominate,  while  putting 
its  cash-cow  desktop  operating  system  business  at 
risk.  ’That  doesn’t  seem  like  a  winning  hand.  ♦ 


Don't  back  up.  Solve  Forward. 

The  only  challenges  greater  than  the  ones  IT  leaders  face  today 
are  the  ones  they'll  face  tomorrow.  That  reality  is  the  guiding 
force  behind  CommVault's  Solving  Forward®  approach  to  data 
and  information  management. 

You  may  know  us  best  as  a  backup  company  (we  were 
positioned  as  an  Enterprise  Backup  and  Recovery  "Leader" 
by  Gartner  after  all).  But  our  expertise  and  unique  single¬ 
platform  Simpana*  software  go  way  beyond  backup. 
CommVault  delivers  industry-leading  solutions  for  the  most 
vexing  data  management  challenges  you  face  today,  and  for 
those  you  will  face  tomorrow. 

More  than  1 5,000  customers  that  have  helped  make 
CommVault  the  world's  fastest  growing  data  storage 
software  company  trust  us  to  help  them  protect  and 
realize  the  untapped  value  of  their  data. 

Isn't  it  time  you  found  out  why? 


Visit  commvault.com/ITLeaders 

►  Access  Gartner’s  201 1  Magic 
Quadrant  for  Enterprise 
Disk-Based  Backup  and  Recovery. 

►  Hear  from  current  CommVault 
customers. 

►  Explore  the  innovations  that  will 
shape  the  modern  data  center 
at  our  Solve  Forward  2012 
virtual  event. 

Or  call  888-746-3849. 


commvault 

sohitigfimvanl 


REDEFINE  B 

data  center  expectations  with 
the  power  of  convergence. 


HP  ProLiant  Gen8— the  vwwU's  most  intelligent 
servers  revolutionize  IT  so  you're  ready  for 
what's  next. 


Only  a  20-year  global  leader  in  servers 
could  deliver  intelligence  like  this,  so 
you  can  turn  IT  innovation  into 
business  acceleration. 


Watch  the  Computerworld  video 
about  HP  ProLiant  Gen8  server 
performance  and  productivity  at 
hp.com/go/rackCW  or  scan 
the  OR  code  below. 


The  next  generation  of  HP  ProLiant  servers  with 
HP  ProActive  Insight  architecture  brings  over  150 
groundbreaking  design  innovations*  that  will 
reshope  how  you  meet  relentless  demand  for 
new  services  and  boost  performance.  Leverage 
breakthroughs  like; 


•  6X  increased  performance* 

•  3X  improved  admin  productivity* 

•  66%  foster  problem  resolution* 


.  > .  hf  -com/go/™*™ 


HP  ProLiant  DL360p  Gen8  servers  and 
HP  ProLiant  DL380p  Gen8  servers  powered 
by  the  Intel  Xeon  Processor  E5-2600  Series 
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